A developer has completed a web project but has not applied any security mechanism. Currently all
the pages are open for anyone to access. Which two can be configured using the RAD8 Security
Editor? (Choose two.)

A.
a list of roles and the resources the roles can access

B.
the web page to use for login and error

C.
the user authentication mechanism used for the application

D.
the link between the web application and an external directory (e.g., Microsoft Active Directory)